Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
File:                     3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa (raw, json)
Hash identifier:          3q/d9IVp5a0dqpnT+hvaegQMnBj5k3djvutj6wRLf/o=
Subject key identifier:   34:8A:47:24:E1:C5:66:9A:27:B6:66:E4:4B:1F:80:37:D6:9D:3C:33
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F432858490E16BD57E52DB477F3609D80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     12189
IP address blocks:        2607:6004:100::/40 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:bd:57:e5:2d:b4:77:f3:60:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=47ebbb44-5bce-48e0-b89f-987f37a1a6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b0:51:7f:93:e6:1d:4b:c2:bc:4d:a5:cd:e3:
                    0d:86:49:b8:56:81:77:8f:eb:5d:36:df:5e:84:86:
                    6b:a8:06:9a:df:44:07:14:5d:dd:6e:65:a1:fc:89:
                    6d:a2:d6:cc:d8:2f:52:51:e8:5b:90:3a:63:71:d3:
                    8e:12:39:10:8a:95:40:20:39:54:f9:e3:4a:e1:62:
                    f1:d0:68:06:c1:bb:9b:d7:0f:43:5c:33:86:97:66:
                    d5:18:32:77:59:10:f0:97:f3:e6:4f:03:48:52:a5:
                    fe:0a:80:7a:fd:32:f3:78:6a:16:1d:b6:52:41:0f:
                    03:0c:f6:1a:cd:5e:49:51:11:43:25:e5:7b:1f:f4:
                    67:48:ef:df:4f:c8:49:45:f6:84:0d:db:f5:93:3e:
                    65:2c:33:a4:16:9a:06:e4:5b:9b:03:a7:22:2e:ec:
                    d1:b7:8d:41:ec:44:5d:1b:cc:69:67:42:2e:31:07:
                    4d:1c:b2:75:d5:d7:fe:0c:17:8c:62:1b:32:25:65:
                    74:8f:23:ca:c6:8d:f0:c1:bb:7e:49:d8:ab:65:51:
                    56:ee:4b:c6:08:1b:4e:6f:69:4e:fe:02:e6:62:c6:
                    c0:74:08:fa:35:a9:54:5b:3c:7f:d2:42:32:aa:9b:
                    67:19:5e:4e:9c:4b:09:66:3d:8d:05:40:ee:73:69:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8A:47:24:E1:C5:66:9A:27:B6:66:E4:4B:1F:80:37:D6:9D:3C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6004:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:25:52:52:a4:44:b1:68:fd:7d:ad:dc:3d:9b:e9:59:99:34:
         00:37:c8:0f:b8:b8:e3:cb:b4:34:56:4a:4d:8f:f5:54:70:93:
         63:c5:69:ec:2a:3b:4d:be:db:41:8c:c6:71:e7:5e:cd:b8:d5:
         50:f5:00:c5:58:94:6d:ab:9a:94:e1:f6:55:60:04:91:a0:44:
         ac:8a:4b:c3:cf:25:0c:b8:68:e6:52:1e:f7:e8:35:89:c1:e7:
         85:46:e0:ca:1d:c2:7b:77:2d:15:2b:cc:bd:07:9b:9d:82:ed:
         52:7b:74:39:07:1a:e3:6c:d6:71:be:0a:98:94:8b:06:39:03:
         e5:6b:0b:88:86:8d:a6:fa:a0:9e:a4:aa:fb:aa:ad:dc:e2:e8:
         92:54:a9:81:49:2f:38:ca:47:6f:6d:7a:48:e4:e7:91:12:70:
         c7:d1:15:28:da:62:82:ab:17:a9:3d:f9:ce:74:4a:c4:eb:c2:
         f9:8a:8a:e7:28:eb:e4:d0:88:d0:4e:a7:bf:56:66:4a:36:be:
         e9:c9:97:75:a5:5b:05:40:b1:49:e7:e6:91:54:22:de:bf:98:
         d9:05:b1:b9:a6:fd:d6:12:d9:f9:81:42:3d:b9:97:54:8b:40:
         1a:6f:63:90:2c:af:ba:ac:76:5a:3d:6b:8b:31:84:52:66:db:
         f4:85:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:36 2025 by rpki-client